
Check Point External Risk Management
Check Point External Risk Management is a cloud-based service for discovering and reducing risks affecting an organization’s internet-facing assets.
What Check Point External Risk Management is
Check Point External Risk Management is a cloud-based service for discovering and reducing risks affecting an organization’s internet-facing assets. It identifies assets across brands, cloud environments, and suppliers, then analyzes vulnerabilities and misconfigurations, correlates findings with threat intelligence, and scores risks for prioritization. Continuous monitoring and recurring assessments help surface weaknesses for remediation. Teams receive prioritized recommendations and a roadmap for remediation and hardening, along with a compliance and regulatory alignment review. Coverage combines threat intelligence, deep and dark web monitoring, external attack surface management, digital risk protection, and supply-chain intelligence. Check Point experts can provide investigations, threat reports, phishing-site and social-profile takedowns, red-team exercises, and attack simulations. The agentless SaaS service offers Essential and Advanced packages. Essential includes one regular user, one out-of-the-box integration, weekly scans, and 20 remediation coins; Advanced includes three regular users, two integrations, daily scans, and 100 remediation coins. A Microsoft Sentinel connector synchronizes alerts and can trigger SOAR playbooks. Custom integrations can use a REST API. Pricing is on request, and package licensing is based mainly on external-facing asset counts, with additional assets available as add-ons.
Good
- Discovers assets across brands, cloud, and suppliers.
- Correlates vulnerabilities with threat intelligence.
- Provides prioritized remediation recommendations.
- Offers a Microsoft Sentinel connector and REST API.
- Includes weekly or daily exposure scans by package.
Watch out
- Pricing is available on request.
- Licensing depends mainly on external-facing asset counts.
- Additional external assets or threat-intelligence assets are add-ons.
Who it suits
The service is relevant to CISOs, SOC managers, incident-response professionals, and red teams. It suits organizations seeking visibility into external assets and prioritized exposure remediation.
Verdict
Check Point External Risk Management combines external asset discovery, risk prioritization, and remediation guidance with optional expert services. Compare package allowances and asset-based licensing with the scope of your organization’s exposure.
Plans and prices
From Check Point External Risk Management's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Infinity External Risk Management Advanced Package | Priced on request | 3 regular users · 2 out-of-the-box integrations · daily exposure scans · 100 remediation coins |
| Infinity External Risk Management Essential Package | Priced on request | 1 regular user · 1 out-of-the-box integration · weekly exposure scans · 20 remediation coins |
The facts
Each one read from Check Point External Risk Management's own pages, with the date it was checked.
What it does
- Assessments
- The service uses recurring assessments and testing to find new weaknesses and reduce the time they remain exposed.checked 7 Oct 2026
- Attack surface
- The service reveals internet-facing assets across brands, cloud environments, and suppliers.checked 7 Oct 2026
- Compliance
- The service includes a compliance and regulatory alignment review and says its recommendations can help improve compliance readiness.checked 7 Oct 2026
- Deployment
- The solution brief describes Infinity External Risk Management as an agentless, cloud-based SaaS solution that can be deployed within minutes.checked 7 Oct 2026
- Integration
- The Check Point External Risk Management connector for Microsoft Sentinel synchronizes alerts and can trigger Sentinel SOAR playbooks for automated remediation.checked 7 Oct 2026
- Intended users
- The service page names CISOs, SOC managers, incident-response professionals, and red teams as relevant roles.checked 7 Oct 2026
- Managed services
- Check Point experts can provide phishing-site and social-profile takedowns, investigations, threat reports, red-team exercises, and attack simulation.checked 7 Oct 2026
- Notable limit
- Package licensing is based mainly on the number of external-facing assets, with additional external assets or threat-intelligence assets available as add-ons.checked 7 Oct 2026
- Purpose
- External Risk Management continuously discovers external threats and vulnerabilities and provides contextual insight and active testing to reduce exposure.checked 7 Oct 2026
- Remediation guidance
- Check Point provides prioritized recommendations and a roadmap with practical steps for remediation and hardening.checked 7 Oct 2026
- Risk prioritization
- Its process includes vulnerability and misconfiguration analysis, threat-intelligence correlation, risk scoring, and prioritization.checked 7 Oct 2026
- Security coverage
- The solution combines threat intelligence, deep and dark web monitoring, external attack surface management, digital risk protection, and supply-chain intelligence.checked 7 Oct 2026
- Support
- The Essential and Advanced package sheets specify Direct Premium support SLA; the Essential sheet lists yearly customer-success-manager cadence and the Advanced sheet quarterly cadence.checked 7 Oct 2026
- Supported API
- A Check Point ERM datasheet describes custom integrations using a REST API.checked 7 Oct 2026
The company
- Founded
- 1993checked 28 Sep 2026
- Headquarters
- Tel Aviv, Israelchecked 28 Sep 2026
Alternatives to Check Point External Risk Management
- 1

CTM360
Free planAndroidiOSWebAPI8.0From $49.99 a year - 2
AttackIQ Platform
Free planWebAPILinuxmacOS7.9From $4,995 a month - 3
runZero
Free planWebAPILinuxmacOS7.8Free plan - 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
FullHunt
Free planWebAPI7.3From $149 a month - 6

Detectify Surface Monitoring
Free planWebAPI6.9From €2,500 a year
